Onsite Cybersecurity Systems Engineer: Vulnerability & RMF

Amentum; Columbia (MD); On-site; USD 90,000 - 120,000; Full time

Job summary

Amentum is seeking a Systems Engineer - Security to implement, operate, and maintain cybersecurity solutions across enterprise and mission networks. You will administer vulnerability management platforms, conduct assessments, and coordinate remediation with system and network teams to sustain a secure computing environment.

The role requires hands-on work with ACAS/Tenable and Nessus scanners, endpoint protection, and RMF/NIST frameworks, in a DoD-aligned setting.

Qualifications

• 5+ years of experience in cybersecurity operations or security engineering.
• Experience deploying ACAS/Tenable Security Center and Nessus.
• Experience with vulnerability assessments and remediation in Windows and Linux environments.
• Experience with enterprise patch management solutions.
• Familiarity with DoD security requirements and RMF/NIST controls.

Responsibilities

• Deploy, configure, and maintain ACAS/Tenable Security Center infrastructure and scanning.
• Perform vulnerability scans across Windows, Linux, networks, and VMs.
• Prioritize remediations based on risk and mission impact.
• Remediate vulnerabilities with system and network admins.
• Develop vulnerability management processes, reporting, and metrics.
• Administer endpoint security platforms (Trellix/HBSS, Defender).
• Support DoD RMF activities and compliance assessments.
• Create scripts to automate vulnerability management and reporting.

Skills

Vulnerability management

ACAS/Tenable Security Center

Nessus scanners

RMF/NIST 800-53

DoD security knowledge

Scripting (PowerShell/Bash/Python)

Security hardening

TCP/IP networking

Education

Bachelor's Degree in IT/CS/Engineering or related field

High School Diploma or equivalent

Tools

Trellix/HBSS

Microsoft Defender

Tanium

SCAP/STIG tooling

WSUS/MECM/SCCM

ACAS

Job description

Amentum is seeking a Systems Engineer - Security to implement, operate, and maintain cybersecurity solutions across enterprise and mission networks. You will administer vulnerability management platforms, conduct assessments, and coordinate remediation with system and network teams to sustain a secure computing environment.

The role requires hands-on work with ACAS/Tenable and Nessus scanners, endpoint protection, and RMF/NIST frameworks, in a DoD-aligned setting.